no rollback for successful deployment and rollback at most once per deployment failure